← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215196

CAT II (Medium)

The AIX root accounts list of preloaded libraries must be empty.

Rule ID

SV-215196r991589_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000366

Discussion

The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading the libraries required by the binary. If this list contains paths to libraries relative to the current working directory, unintended libraries may be preloaded.

Check Content

Verify the "LDR_PRELOAD" environment variable is empty or not defined for the "root" user using command: 
# env | grep LDR_PRELOAD 

If a path is returned, this is a finding.

Fix Text

Edit the "root" user's initialization files and remove any definition of "LDR_PRELOAD".